Skip to content

Hector 0.4.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Oct 09:42
· 58 commits to main since this release
v0.4.2
850ef44

What's new in 0.4

Netbite becomes Hector, a small all-in-one security app for macOS. Netbite stays the name of its network module, and 0.3 installs move over on their own: helper, blocklist, country database and VirusTotal key.

  • Connections: an interactive map, with one line and a count bubble per country, a country filter, and zoom and pan. Network names (AS numbers and organizations) come from a second free DB-IP database.
  • Blocklists: StevenBlack Unified and EasyPrivacy hosts lists, downloaded and checked by the helper every week.
  • Persistence: launch agents and daemons, login items, background tasks, extensions, cron, profiles and browser extensions, each with its code signature.
  • Processes: the process tree with signatures, arguments, connections and flags for code running from odd places.
  • Checkup: SIP, Gatekeeper, XProtect, FileVault, firewall, updates, sharing services and more, each with how to fix it.
  • Keyboard taps: apps that receive your keystrokes.
  • Camera & mic: a log of when they turn on and off, naming the app (from the microphone's clients, and the camera's green indicator).
  • VirusTotal: look up files by hash with your own free key (Settings → VirusTotal). Files are never uploaded.
  • The hector command-line tool does all of this from a terminal.
  • Lighter and harder to abuse (0.4.1 and 0.4.2): nothing is refreshed while the window is hidden, the IP databases take about 4 MB each instead of 110 MB, the camera and microphone monitor sleeps while no microphone runs, and the root helper downloads as nobody and runs in a sandbox that only lets it write its own files and start its own tools. Update the helper from Blocklists after installing.

Install

  1. Download Hector-0.4.2-macOS.zip below and open it.
  2. Move Hector.app to your Applications folder.
  3. Open it. Hector is not notarized by Apple (that needs a paid developer account), so macOS refuses the first launch:
    • open System Settings → Privacy & Security, scroll down, and click Open Anyway next to the Hector message;
    • or, in Terminal: xattr -dr com.apple.quarantine /Applications/Hector.app
  4. To block destinations, open Blocklists and click Install helper…. macOS asks for an administrator password once.

Hector runs on macOS 15 or later, on Apple silicon and Intel.

The command-line tool ships inside the app. To use it from a terminal:

sudo mkdir -p /usr/local/bin && sudo ln -sf /Applications/Hector.app/Contents/Helpers/hector /usr/local/bin/hector

Uninstall

Choose Hector → Uninstall Hector… in the menu bar, or Settings → General → Uninstall Hector…. It removes every rule, the helper and its logs, your blocklist, the country database, preferences, caches and the VirusTotal key, then moves the app to the Trash. macOS asks for an administrator password once.

Verify the download

SHA-256 of the zip: ee71c7828caa428c55d0e34485f611444b3970512f7257782fa8f029068a3104

shasum -a 256 Hector-0.4.2-macOS.zip

The app is built by GitHub Actions from the tagged source, with the workflow in .github/workflows/release.yml.

Assets 4
Loading